$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: 7ticGsUw6umQWCe47+lpBisRQttjuBEUxHI0y+uEip0= Subject key identifier: 45:65:31:23:F1:93:34:47:8E:0A:BE:31:3B:70:69:FD:BE:1A:F5:F1 Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 04CF Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 0497 Signing time: Thu 26 Mar 2026 04:02:34 +0000 Manifest this update: Thu 26 Mar 2026 04:02:34 +0000 Manifest next update: Sat 28 Mar 2026 04:02:33 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: AFx5njgkE+bsP0FV8uPbCz0FXOQIn8+jD1qiUj54FGc=) 2: 5A86EC0A1EDA11F18DFE34AEDAE4EC9C.roa (hash: PImR2CbgLNIrA4V+PLm0kbfXEPNlCfNyVbzpz9YIgCs=) 3: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=) 4: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 5: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 6: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 7: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 8: 15B876EE277111F1B66636C4DAE4EC9C.roa (hash: YUSH5OdcLTebUTDCuoOe6y6BSHYiSr9i3OG42WzbyWI=) 9: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=) 10: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 11: E44287A0E1A511F09B8305AFDAE4EC9C.roa (hash: i0YqrCk3d9f/RPOZqg04E/KSYN7esrzd1BRKHLmfxzk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 28 Mar 2026 00:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Mar 26 04:02:34 2026 GMT Not After : Mar 28 04:02:33 2026 GMT Subject: CN=69c4afda-5731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:3b:32:ac:4e:8d:0c:3b:9c:dc:2f:c7:b4: 66:d0:93:75:68:30:f1:c3:2b:0f:ea:86:1e:d4:74: c3:94:8f:86:41:e5:65:c6:73:a3:6f:42:46:8a:2f: d1:f8:da:32:58:d6:79:7c:2b:af:c1:28:e1:9f:2b: 63:e2:52:ae:3c:9b:e2:a0:c0:61:44:31:8c:52:66: 59:80:ea:83:cf:bd:78:f7:68:46:a1:31:10:4c:1f: c7:86:49:b8:40:b2:1c:82:0d:fe:ed:f4:8f:5d:18: f2:ea:d7:9d:c5:4f:6d:7b:11:65:d6:68:d1:82:22: 51:d1:c3:9b:17:5c:47:ae:42:cd:66:9f:e5:95:1d: 9f:36:0f:2f:86:b9:28:c5:5f:20:5d:d7:02:8a:c5: ed:bb:7e:48:b8:62:cb:66:23:28:69:fd:6e:3c:1f: c7:fc:ad:e8:fe:74:ee:e7:45:f8:bf:56:15:64:86: 42:08:8e:8e:36:73:11:93:ac:70:16:82:c1:b3:b1: 26:df:3d:c9:0e:c2:a0:9a:fe:2f:b7:10:4f:ed:00: b0:97:75:f7:c7:50:61:7c:f0:e9:a4:55:2e:92:dd: 83:59:24:ae:cc:5c:6e:cb:36:57:a6:2e:6f:fc:75: ba:64:53:28:1b:fc:f7:c9:32:d3:82:b7:26:d4:54: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:31:23:F1:93:34:47:8E:0A:BE:31:3B:70:69:FD:BE:1A:F5:F1 X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:63:0a:01:00:fb:1c:ed:68:d5:b0:3b:33:b6:76:23:d4:27: 5e:c0:83:ef:33:3d:e6:12:ca:b2:42:8d:fd:64:ad:f3:f5:0b: 70:2a:6e:01:f7:72:58:1c:73:9a:18:07:79:17:e6:27:1e:9a: 35:92:61:e6:ad:e2:1e:45:a6:2e:a4:d4:ff:0a:b5:31:7a:0b: 61:eb:e8:1b:7c:4a:a6:3f:ed:5b:4d:83:3f:58:a1:45:c2:56: 62:8a:87:b2:d4:d6:55:ca:a5:5b:ce:0c:f2:dd:c3:50:e5:94: 07:c9:a9:5b:69:58:f1:9a:c3:4f:d4:01:88:5a:15:a5:e9:db: cd:63:7d:c9:a8:c7:15:9e:ba:e4:eb:0b:b7:3e:78:ed:67:8c: 6e:c0:db:e1:c5:cd:dc:61:b7:86:f0:9e:fb:0f:22:8b:75:39: e7:c0:7f:02:ac:ac:82:93:1f:a8:41:a5:f8:41:74:34:d0:39: 85:10:bf:6e:8d:89:3a:e1:9f:1b:4c:71:1c:55:ef:17:92:8b: 8a:d3:6b:f5:00:f8:7e:9d:f7:cd:1d:2f:cf:9c:f6:53:b7:71: bf:8b:3a:95:bc:f5:9d:35:39:f4:a6:fe:a1:05:52:7d:8a:43: 9d:f9:de:cb:f5:d9:cd:61:df:35:51:c8:66:23:25:dd:19:93: d2:f5:e3:8e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNjAzMjYwNDAyMzRaFw0yNjAzMjgwNDAyMzNaMBgxFjAU BgNVBAMTDTY5YzRhZmRhLTU3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDLGDsyrE6NDDuc3C/HtGbQk3VoMPHDKw/qhh7UdMOUj4ZB5WXGc6NvQkaK L9H42jJY1nl8K6/BKOGfK2PiUq48m+KgwGFEMYxSZlmA6oPPvXj3aEahMRBMH8eG SbhAshyCDf7t9I9dGPLq153FT217EWXWaNGCIlHRw5sXXEeuQs1mn+WVHZ82Dy+G uSjFXyBd1wKKxe27fki4YstmIyhp/W48H8f8rej+dO7nRfi/VhVkhkIIjo42cxGT rHAWgsGzsSbfPckOwqCa/i+3EE/tALCXdffHUGF88OmkVS6S3YNZJK7MXG7LNlem Lm/8dbpkUygb/PfJMtOCtybUVKSfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURWUx I/GTNEeOCr4xO3Bp/b4a9fEwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeYwoBAPsc7WjVsDsztnYj1CdewIPv Mz3mEsqyQo39ZK3z9QtwKm4B93JYHHOaGAd5F+YnHpo1kmHmreIeRaYupNT/CrUx egth6+gbfEqmP+1bTYM/WKFFwlZiioey1NZVyqVbzgzy3cNQ5ZQHyalbaVjxmsNP 1AGIWhWl6dvNY33JqMcVnrrk6wu3PnjtZ4xuwNvhxc3cYbeG8J77DyKLdTnnwH8C rKyCkx+oQaX4QXQ00DmFEL9ujYk64Z8bTHEcVe8XkouK02v1APh+nffNHS/PnPZT t3G/izqVvPWdNTn0pv6hBVJ9ikOd+d7L9dnNYd81UchmIyXdGZPS9eOO -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:19 2026 by rpki-client